> (1) Do I have a problem here? You and everyone else. These are spammers or virus-infected hosts sending to either known or dictionary-based addresses on your server, and instead of randomizing their HELOs, they're just reusing the same variable they're using for the domain name, most likely.
> (2) I am set to relay for my internal IPs only. Can this get around > that setting and make me a relay? No. > (3) Besides contacting the IP owners, what should be done? Get some anti-spam (Declude, IMGate) if/when the problem gets too big to be ignored by users and reasonable resource usage metrics. Note that virus-infected hosts may well not be RBLed. You could also kill anything with 'MAILER-DAEMON@jcjc' in the MAIL FROM:--this is a Return-Path that is used by lots of other servers, but not your IMail server, so you know it's a fake Postmaster. -Sandy To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
